$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aaf2e82c-aef8-3a15-b2da-39b3835bfb18.roa File: aaf2e82c-aef8-3a15-b2da-39b3835bfb18.roa (raw, json) Hash identifier: RJQL5V+HkL+oaIXwBpml1RxFooatIp7wSiw6JK55oDg= Subject key identifier: 7B:48:EC:36:15:90:6B:22:FF:4D:D1:1E:17:FB:3E:1C:67:00:D7:3C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A1035533617569451F18FDC80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aaf2e82c-aef8-3a15-b2da-39b3835bfb18.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 4213 IP address blocks: 2001:470:3a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:53:36:17:56:94:51:f1:8f:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=06a7c01f-3f36-49b4-bc25-c42b8405ddb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:7b:f7:86:fe:05:90:28:de:b8:bd:36:8c: 49:4d:ba:14:df:0a:22:6f:17:0c:c3:ab:28:80:25: 43:db:bb:ec:fa:89:8f:6c:a1:86:9a:62:bb:38:91: ec:a1:f7:9b:fa:a2:77:fb:33:18:88:25:26:db:f4: 7f:4d:8f:05:0f:b9:75:4c:2c:05:78:5d:b2:4c:a5: 52:a8:ce:c1:20:c0:55:26:87:60:b0:af:1d:cb:cb: 19:51:82:7a:e7:e3:4f:1b:de:fa:53:64:92:54:0a: d4:bf:ba:db:b7:58:c4:03:dc:c9:1d:ec:3b:59:d5: b4:ca:d6:d9:25:97:8c:ba:d5:4a:be:2f:3d:06:cb: f3:3f:6a:1b:cc:d2:9b:54:88:4b:6e:4d:ee:e7:40: 06:0c:73:15:6e:0c:c7:f3:9a:bf:e5:f0:53:90:9a: 29:a6:81:f1:c4:ce:3e:2b:28:63:1e:1c:fb:2e:f5: cc:fc:75:ae:19:d9:43:56:f5:94:8d:68:ae:61:ce: ab:1c:df:3f:84:f0:27:29:d8:9e:a5:3d:8a:6f:cd: a9:67:88:c0:5b:ab:84:3f:e0:41:52:99:4f:c7:88: 98:c9:2b:19:9f:3e:1a:63:5f:5b:30:0f:5f:7e:77: 47:93:aa:e9:39:10:87:00:f1:70:52:3b:26:ec:9e: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:48:EC:36:15:90:6B:22:FF:4D:D1:1E:17:FB:3E:1C:67:00:D7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aaf2e82c-aef8-3a15-b2da-39b3835bfb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7f:cf:9c:73:89:7d:33:7e:ba:1d:20:3e:31:54:0c:05:b1: 7b:20:45:fa:e2:8e:e4:4b:70:6d:44:80:82:17:d0:2b:8c:e2: b4:ca:98:e6:8e:65:e2:c4:19:3f:d1:3f:92:9e:a0:4a:27:7e: c2:45:5e:b3:63:b0:5b:ec:c4:df:0e:90:db:45:76:ba:63:18: 26:67:3e:38:34:ac:0d:ae:24:2c:48:55:24:ad:68:52:86:72: 52:c7:84:49:85:c4:b5:c6:ac:38:13:ea:6a:7a:6f:fa:35:9a: 83:6d:79:1a:0e:7c:d3:c4:15:6d:ec:1f:cb:c8:13:21:90:a5: bf:bc:2c:93:dc:9e:91:23:09:56:2a:4f:aa:f1:aa:5a:31:3b: 5b:34:8f:f5:b1:1c:64:48:ea:25:9d:d6:a8:17:50:f5:66:70: 79:2c:8a:b4:8d:ab:4a:04:b1:28:8b:f3:fd:82:5d:03:22:25: a2:7c:4c:3f:6c:53:a8:83:e7:6a:52:c8:4e:69:78:d8:43:da: be:c8:af:7a:e4:47:de:8c:c2:40:8a:85:6a:67:76:51:5c:76: 7a:b9:36:a8:0e:3e:e2:d7:14:a3:b6:a2:08:f4:87:ce:6a:69: 3e:0d:d6:fa:fa:d5:89:f0:f0:7d:c5:ae:dd:03:e5:89:68:86: 6e:c1:96:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNVM2F1aUUfGP3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MDZhN2MwMWYtM2YzNi00OWI0LWJjMjUtYzQyYjg0MDVkZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnV794b+BZAo3ri9NoxJTboU3woibxcMw6so gCVD27vs+omPbKGGmmK7OJHsofeb+qJ3+zMYiCUm2/R/TY8FD7l1TCwFeF2yTKVS qM7BIMBVJodgsK8dy8sZUYJ65+NPG976U2SSVArUv7rbt1jEA9zJHew7WdW0ytbZ JZeMutVKvi89BsvzP2obzNKbVIhLbk3u50AGDHMVbgzH85q/5fBTkJoppoHxxM4+ KyhjHhz7LvXM/HWuGdlDVvWUjWiuYc6rHN8/hPAnKdiepT2Kb82pZ4jAW6uEP+BB UplPx4iYySsZnz4aY19bMA9ffndHk6rpORCHAPFwUjsm7J4j0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHtI7DYVkGsi/03RHhf7PhxnANc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWFmMmU4MmMtYWVmOC0z YTE1LWIyZGEtMzliMzgzNWJmYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABV/z5xziX0zfrodID4xVAwFsXsgRfrijuRLcG1EgIIX0CuM4rTK mOaOZeLEGT/RP5KeoEonfsJFXrNjsFvsxN8OkNtFdrpjGCZnPjg0rA2uJCxIVSSt aFKGclLHhEmFxLXGrDgT6mp6b/o1moNteRoOfNPEFW3sH8vIEyGQpb+8LJPcnpEj CVYqT6rxqloxO1s0j/WxHGRI6iWd1qgXUPVmcHksirSNq0oEsSiL8/2CXQMiJaJ8 TD9sU6iD52pSyE5peNhD2r7Ir3rkR96MwkCKhWpndlFcdnq5NqgOPuLXFKO2ogj0 h85qaT4N1vr61Ynw8H3Frt0D5Ylohm7BlpM= -----END CERTIFICATE-----Generated at Fri Jun 6 16:27:06 2025 by rpki-client